Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/TYiDdMg7jFYESVHenYkZA0H7wJM.roa
File: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (raw, json)
Hash identifier: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=
Subject key identifier: 4D:88:83:74:C8:3B:8C:56:04:49:51:DE:9D:89:19:03:41:FB:C0:93
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0194274760B6E0D450DF2D343F6905A1DFB4
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/TYiDdMg7jFYESVHenYkZA0H7wJM.roa
Signing time: Thu 02 Jan 2025 13:49:36 +0000
ROA not before: Thu 02 Jan 2025 13:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59771
IP address blocks: 2a00:1560:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:60:b6:e0:d4:50:df:2d:34:3f:69:05:a1:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jan 2 13:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d888374c83b8c56044951de9d89190341fbc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:9b:ff:e4:8d:f3:aa:6c:a8:19:fc:29:15:
fe:dc:c4:07:91:ae:88:cc:c6:00:17:f2:66:3b:7a:
68:19:0f:ba:62:c2:b9:6b:e4:e8:24:57:03:3c:c5:
51:f1:0f:08:35:85:67:64:82:79:53:8f:dd:ac:ef:
69:02:06:93:40:c8:4b:d6:45:1a:92:8d:68:78:1a:
05:5d:d4:9e:4f:72:0e:01:0c:0f:a7:4a:a7:22:fa:
80:4a:70:99:f1:7f:0c:70:5b:ab:9a:d7:be:7d:fe:
06:30:50:7e:b4:eb:9f:b6:38:c7:7f:db:84:25:77:
33:7e:8d:97:b7:cb:c5:bf:6f:56:c8:05:e5:03:80:
bb:3f:cc:c4:f9:2c:d2:de:6c:5e:91:6a:a5:34:df:
ae:33:8e:41:8e:fd:fe:e6:85:93:da:83:ac:0f:65:
d5:ea:a8:bd:e3:ad:0f:a2:14:23:7f:e2:4c:7c:df:
d1:46:85:34:81:ae:b1:0d:3e:a9:dc:36:75:9e:bc:
90:e4:fe:46:ab:32:0c:e9:7a:18:2f:5c:a2:8b:be:
86:4d:0a:06:76:ba:13:24:6b:21:97:5e:89:b0:d9:
09:1e:51:76:21:ee:5c:1a:e3:f9:cd:90:52:cb:92:
7b:be:08:59:b8:77:24:5e:44:d9:ca:7a:29:2b:21:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:83:74:C8:3B:8C:56:04:49:51:DE:9D:89:19:03:41:FB:C0:93
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/TYiDdMg7jFYESVHenYkZA0H7wJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1560:d::/48
Signature Algorithm: sha256WithRSAEncryption
a7:30:3f:95:4b:13:78:46:88:57:9c:9c:19:5f:8d:28:30:6b:
8a:76:34:9f:fc:b8:11:4f:85:5c:7b:fa:bb:19:66:ea:19:3c:
6a:ff:d5:9a:c9:c0:5a:4f:0a:07:08:17:62:bd:1f:38:d4:5c:
ee:68:23:d2:82:b5:db:68:f7:5e:c0:55:09:6f:9f:80:67:68:
d1:39:d7:d0:30:d4:7b:ea:ad:fe:9b:eb:6b:17:87:9e:15:f9:
1a:dd:4c:38:27:55:6c:e6:bb:3e:fa:fe:46:78:ae:80:40:3e:
c1:34:73:6d:89:08:bc:8b:45:01:43:5b:db:df:9b:9f:31:9a:
cb:42:7c:01:8d:51:fb:77:f9:ac:bb:a7:9c:5c:3a:47:58:8a:
20:cd:7b:c0:8d:54:2e:53:06:d5:cf:3a:62:0d:e1:6d:ca:4d:
ad:f9:56:4b:f9:74:b6:a9:cf:65:a7:40:0d:57:e5:34:20:92:
0a:40:d3:7e:d8:de:64:95:79:0b:91:2c:32:f8:f1:ef:13:04:
2a:9e:b8:87:ea:0f:e9:79:70:5f:a3:62:80:eb:54:ba:25:1f:
40:fe:e5:fc:4c:fc:2f:b3:0f:4b:b2:bd:36:ce:99:99:2c:ff:
4d:f6:a0:5c:55:a8:3d:af:38:26:a8:87:d2:28:51:af:9e:22:
09:a5:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:06 2025 by rpki-client